Sr. Director, Security Software Engineering

Job Summary:

Sr. Director, Security Software Engineering

Division:Office of Chief Engineering

Line Manager:  Chief Engineer

THE TEAM: 

The Security Engineering function at Ticketmaster connects our core engineering work with modern security practices. Working directly with our development teams worldwide, this group guides the implementation of security measures that protect our platform and our customers. The role offers the chance to work with advanced technology while shaping security practices for a major entertainment platform that serves millions of fans. Our security work directly impacts how we build and maintain our products, making this a key part of Ticketmaster's technology strategy.

THE JOB: 

Reporting to the Chief Engineer, you'll build and lead a security engineering team that fundamentally changes how we approach software security. By embedding security practices into the earliest stages of development, your team will help developers catch and address potential issues when they're easiest to fix. This role sits at the heart of our engineering organization, reflecting our commitment to making security an essential part of how we build software.

Your team will implement systematic, bottom-up threat modelling practices, guiding development groups in identifying security challenges before developing solutions. Working as trusted advisors, your engineers will review designs and provide hands-on consultation, focusing particularly on application security. This consultative approach means partnering with development teams early and often, ensuring that security becomes a natural part of the development process rather than a hurdle to overcome.

The team will drive cultural transformation by helping development groups understand and embed zero trust principles into their daily work. Through education and hands-on guidance, security will become fundamental to our development practices.

Through ongoing consultation, analysis, and discovery efforts with development teams, you will identify entire classes of security defects and vulnerabilities across the organization. These insights will shape strategic recommendations for the Chief Engineer, CTO, and other senior partners, outlining how to address these challenges at scale. Success in this role means creating a team that finds security problems and shapes enterprise-wide solutions that strengthen our security.

At Ticketmaster, security isn't just about protecting data – it's about maintaining the trust of millions of fans who rely on us to connect them with live entertainment experiences. Our platform handles high-demand ticket sales for some of the world's biggest events, making security both challenging and rewarding. Every security improvement your team implements directly affects how fans experience these moments, from seamless ticket purchases to smooth venue entry. You'll be working at the scale of major entertainment events, where security decisions impact millions of transactions and fan experiences in real-time.

WHAT YOU WILL BE DOING

Team Building and Leadership

Build and lead a team of 3-4 security engineers, focusing on recruitment, mentoring, and aligning team efforts with Ticketmaster's security objectives.

Security Architecture and Implementation

Implement shift-left security practices and zero trust principles across the development lifecycle. Drive the integration of security controls early in the SDLC and establish security tools and processes that support these principles.

Strategic Analysis and Planning

Identify entire classes of security defects and vulnerabilities through systematic analysis of development practices and security incidents. Develop comprehensive security strategies and recommendations for executive leadership on addressing these challenges at scale. Create and manage security budgets while tracking key metrics that demonstrate security improvement.

Threat Modeling

Develop and mature threat modeling practices across development teams. Train stakeholders in threat modeling techniques and integrate these practices into the development lifecycle.

Security Consultancy and Education

Provide security guidance across departments, focusing on application security. Develop and deliver security awareness programs while acting as a security champion throughout the organization.

WHAT YOU NEED TO KNOW (or TECHNICAL SKILLS/COMPETENCIES)  

• 10+ years of experience in information security, with at least 5